Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: 34FTs/d4kIH6P7HrO/ooKYfZrjKpl59DH2feuv6TdMQ=
Subject key identifier: 85:00:9C:24:37:08:E7:42:8E:6D:BF:33:F5:A7:21:0D:3D:1D:CE:6D
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019D9999565C371D7FA0C8753627498DEC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 0F99
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: NhYzzohvuxHHiW2SgAlI/Ocs+YGPIR8bTToJ1xYls18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:56:5c:37:1d:7f:a0:c8:75:36:27:49:8d:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=85009c243708e7428e6dbf33f5a7210d3d1dce6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:96:9d:13:2f:e5:40:9c:d4:a1:02:86:cd:
92:86:5e:c3:8f:2c:e2:21:98:f1:72:9e:7d:28:67:
64:86:52:2c:9f:fd:36:d8:79:c3:64:24:85:d1:52:
16:d0:8f:b7:59:25:e5:5b:68:31:0b:be:0a:0a:a6:
e4:af:22:95:07:ec:e1:5c:74:d1:d5:de:13:b4:ef:
90:38:c6:0d:c1:58:b0:fd:fd:fe:4a:8d:88:53:99:
23:8e:1c:a3:1c:a0:9a:f7:b8:31:f2:6a:9f:53:52:
0d:07:41:24:45:19:2d:20:d3:12:ee:14:e6:e9:7e:
41:07:a9:ae:2d:cf:8e:e3:95:35:df:9d:1c:c1:f0:
54:fb:21:be:57:a8:ff:07:a2:a4:b9:e9:22:9f:18:
fe:63:c2:30:33:82:ef:10:70:1c:7c:d0:0a:f3:02:
f1:9a:ec:5d:01:37:8e:b5:b2:2d:49:54:34:87:16:
0e:c9:79:74:48:29:7b:81:30:f1:32:8c:2b:63:c0:
aa:49:ac:dc:39:8f:27:c7:88:a1:c9:31:94:bd:8a:
58:29:e0:a0:f9:c0:3a:5a:37:73:25:36:01:cf:57:
bd:e0:9f:8a:e2:b2:a4:65:fd:28:20:0c:60:84:65:
50:b6:4a:67:70:f8:dd:2f:62:b3:2d:3e:07:66:3b:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:9C:24:37:08:E7:42:8E:6D:BF:33:F5:A7:21:0D:3D:1D:CE:6D
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:89:d5:68:81:c1:fd:86:e7:6f:d8:52:d9:64:f9:8f:d8:
3e:72:84:e4:8f:dd:07:ab:c2:5a:88:d2:59:65:2f:be:50:fc:
31:18:d9:06:28:7a:d2:80:a2:7d:a3:fb:b5:4f:15:f6:15:b2:
d0:8b:a5:76:da:a4:33:e9:f1:82:cf:df:e1:21:5b:9e:21:32:
e0:fd:ce:f1:b9:ff:ec:b5:e1:0e:90:23:5a:8b:23:06:23:51:
87:54:da:dc:87:a1:db:ff:94:f4:36:a5:6b:9a:13:ad:6a:25:
5c:87:fb:0a:9d:e7:2e:66:90:60:94:72:ca:f8:a4:35:4d:11:
50:6f:01:df:0d:0c:34:24:63:32:ab:93:8a:d9:27:12:fe:e3:
49:31:cf:6c:2b:d9:2f:90:2c:6f:f7:52:0e:3f:21:5f:42:91:
84:46:87:18:8e:9b:fd:15:2c:92:56:27:f3:55:24:d1:18:01:
4b:d0:08:99:95:22:e9:87:05:cd:d4:4a:75:2a:9c:56:eb:ea:
d0:e3:bc:a2:e4:89:81:55:04:56:b5:00:62:e6:89:7c:7c:43:
b8:b8:c7:e5:84:7f:8e:12:e2:1d:49:86:46:ac:8d:67:cf:67:
81:a2:1b:09:6d:a3:5f:b6:fc:d8:67:39:b6:1f:fb:e7:bd:3a:
92:ce:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:12 2026 by rpki-client